CVE-2025-4831

🗓️ 17 May 2025 16:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 49 Views🌐 WEB

Critical buffer overflow in TOTOLINK A702R, A3002R, A3002RU via HTTP POST Request manipulation.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSiteSurveyProfile file in the microprogramming software for router devices A702R, A3002R, and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	23 May 202500:00	–	bdu_fstec
Circl	CVE-2025-4831	17 May 202518:42	–	circl
CNNVD	TOTOLINK A720R、TOTOLINK A3002R和TOTOLINK A3002RU 安全漏洞	17 May 202500:00	–	cnnvd
Cvelist	CVE-2025-4831 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow	17 May 202516:31	–	cvelist
EUVD	EUVD-2025-15593	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4831	17 May 202517:15	–	nvd
OSV	CVE-2025-4831	17 May 202517:15	–	osv
Positive Technologies	PT-2025-21799 · Totolink · Totolink A702R +1	17 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4831	19 May 202516:36	–	redhatcve
Vulnrichment	CVE-2025-4831 TOTOLINK A702R/A3002R/A3002RU HTTP POST Request formSiteSurveyProfile buffer overflow	17 May 202516:31	–	vulnrichment

NVD

Node

AND

totolink a702r_firmwareMatch3.0.0-b20230809.1615

totolink a702rMatch-

Node

AND

totolink a3002r_firmwareMatch3.0.0-b20230809.1615

totolink a3002rMatch-

Node

AND

totolink a3002ru_firmwareMatch3.0.0-b20230809.1615

totolink a3002ruMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A702R",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "TOTOLINK",
    "product": "A3002R",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "TOTOLINK",
    "product": "A3002RU",
    "versions": [
      {
        "version": "3.0.0-B20230809.1615",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
totolink	www.totolink.net/
vuldb	www.vuldb.com/
github	www.github.com/CH13hh/tmp_store_cc/blob/main/toto/9.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
submit-url	request body	/boafrm/formSiteSurveyProfile	Buffer overflow via manipulated submit-url in POST handler (remote exploit possible).	CWE-120, CWE-119

17 Jun 2026 09:34Current

8.9High risk

Vulners AI Score8.9

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00738

SSVC